Support for non-regulatory APIs

WSO2 Open Banking supports publishing non-regulatory APIs that are not bound to any regulations or standards. You can create non-regulatory applications to access the non-regulatory APIs. Certain security aspects of regulatory applications are minimised to cater to business use cases of a bank. The non-regulatory applications access the non-regulatory APIs without transport layer security. Therefore, grant types that are not allowed in regulatory applications such as password can be used in non-regulatory applications. These features add more flexibility in designing use cases and user experiences when managing APIs and applications using WSO2 Open Banking. For example, you can publish an API to retrieve branch details and ATM details of a bank. 

Use one of the following methods to deploy a non-regulatory API in WSO2 Open Banking API Manager - API Publisher.

Open

This document explains how to create an application that subscribes to a non-regulatory API using WSO2 Open Banking.

Create an application

This section explains how to create an application to subscribe to non-regulatory APIs.

1. Sign in to the API Store (https://<WSO2_OB_APIM_HOST>:9443/store) with a user whose roles includes Internal/subscriber.

2. Go to the  Applications tab.

3. Click Add Application .

4. Enter application details.

   Open

   

5. Click Add.

Subscribe to API

Use the application created above to subscribe to a non-regulatory API to access the API resources. Once subscribed, the application can access all the supported services of the API resources.

1. Go to the APIs tab in the API Store.

2. Select a non-regulatory API.

3. Select the application you created in the Create an application section.
   

4. Set the throttling policy to Unlimited.

5. Click Subscribe.

Generating Keys

Open

After creating an application it is configured as a Non-Regulatory application. Follow the steps below to generate keys:

1. Sign in to the API Store as a TPP user.

2. Go to the Applications tab.
    

3. Select either of the following tabs:

   1. Production Keys: Generates access tokens in the production environment.

   2. Sandbox Keys: Generates access tokens in the sandbox environment.

4. Provide the requested information.

   Open

   

5. To generate consumer key and consumer secret:

   • If you are generating production keys: Click Request Access. If workflows are configured in the solution, it sends a request to Approver user to approve the token generation. Otherwise, it generates consumer key and consumer secret.

   • If you are generating sandbox keys: Click Generate Keys. 

6. Use the generated cURL commands to generate access tokens to invoke a non-regulatory API.